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CONTROLLING ACCESSES TO ISOUTED MEMORY USING A MEMORY 
CONTROLLER FOR ISOLATED EXECUTION 



BACKGRQUMn 
1- Field of tha Inventioi^ 

This invention relates to microprocessors. In particular, the Invention 
relates to processor security. 

2. Description o f Related Ar^ 

Advances in microprocessor and communication technologies have 
opened up many opportunities for applications that go beyond the traditional 
ways of doing business. Electronic commerce (E-commerce) and business-to- 
buslness (B2B) transactions are now becoming popular, reaching the global 
markets at a fast rate. Unfortunately, while modem microprocessor systems 
provide users convenient and efficient methods of doing business, 
communicating and transacting, they are also vulnerable to unscmpulous 
attacks. Examples of ttiese attacks Include vims, intrusion, security breach, 
and tampering, to name a few. Computer security, therefore, is becoming 
more and more important to protect the integrity of the computer systems and 
Increase the trust of usm. 

Threats caused by unscrupulous attacks may be in a number of forms. 
Attacks may be remote without requiring ph/sical accesses. An invasive 
remote-launched attack by hackers may disrupt the normal operation of a 
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system connected to thousands or even millions of users. A virus program 
may corrupt code and/or data of a single-user platfonn. 

Existing techniques to protect against attacks have a number of 
dravirtjacks. Anti-virus programs can only scan and detect known viruses. 
l\4ost anti-virus programs use a w/eak policy in w/hich a file or program is 
assumed good until proved bad. For many security applications, this weak 
policy may not be appropriate. In addition, most anti-virus programs are used 
locally where they are resident in tiie platfomi. This may not be suitable in a 
group woric environment. Security co-processors or smart cards using 
cryptographic or other security techniques have limitations in speed 
perfomnance, memory capacity, and flexibility. Redesigning operating systems 
creates software compatibility issues and causes ti^mendous investment In 
development efforts. 

BRIEF DESCRIPTION OF THE DRAWINGS 

The features and advantages of the present invention will become 
apparent from ttie following detailed description of the present invention in 
which: 

Figure 1A is a diagram illust^ting a logical operating architecture 
according to one embodiment of tiie invention. 

Figure 1B is a diagram illustrating accessibility of various elements in 
the operating system and the processor according to one embodiment of ttie 
Invention. 

Figure 1C is a diagram iliustaating a computer system in which one 
embodiment of the invention can be practiced. 

Rgure 2A is a diagram illustrating the isolated execution circuit shown 
in Figure 1C according to one embodiment of the invention. 
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Rgure 2B is a diagram illustrating the access manager shown in Figure 
2A according to one embodiment of the invention. 

Figure 3A is a diagram illustrating the access checking circuit to 
manage snoop accesses according to one embodiment of the Invention. 

Figure 3B Is a diagram illustrating the access checking circuit to 
manage logical processor operations according to another embodiment of the 
invention. 

Figure 4 is a flowchart Illustrating a process to manage snoop accesses 
for isolated execution according to one embodiment of the Invention. 

Figure 5 is a flowchart illustrating a process to manage logical 
processor operations for isolated execution according to one embodiment of 
the invention. 

Figure 6 Is a diagram illustrating tiie isolated area access contiX)l in tiie 
memory controller hub (MCH) shown in Figure 1C according to one 
embodiment of the invention. 

Rgure 7 Is a diagram illustrating a configuration controller shown in 
Figure 6 according to one embodiment of ttie Invention. 

Figure 8 is a diagram Illustrating an access grant generator shown in 
Figure 6 according to one embodiment of ttie invention. 

Figure 9 is a flowchart illustrating a process to control access to 
memory according to one embodiment of tiie invention. 

DETAILED DESCRIPTION 

In the following description, for purposes of explanation, numerous 
details are set fbrtii in order to provide a ttiorough understanding of the 
present Invention. However, it will be apparent to one skilled in Ihe art tf,at 
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these specific details are not required in order to practice the present 
invention. In other instances, well-known electrical structures and circuits are 
shown in block diagram form in order not to obscure the present invention. 

ARCHITECTURE OVERVIEW 

One principle for providing security in a computer system or platfonn is 
the concept of an isolated execution architecture. The isolated execution 
architecture includes logical and physical definitions of hardware and software 
components that interact diiecUy or indirectiy with an operating system of the 
computer system or platform. An operating system and tfie processor may 
have several levels of hierarchy, referred to as rings, corresponding to various 
operational modes. A ring is a logical division of hardware and software 
components ttiat are designed to perfomn dedicated tasks wiUiin the operating 
system. The division is typfcally based on tiie degree or level of privilege, 
namely, ttie ability to make changes to ttie platfonn. For example, a ring-0 is 
the innemiost ring, being at ttie highest level of the hierarchy. Ring-0 
encompasses ttie most critical, privileged components. In addition, modules in 
Rlng-0 can also access to lesser privileged data, but not vice versa. Ring-3 is 
the outennost ring, being at the lowest level of the hierarchy. Ring-3 typically 
encompasses users or applications level and executes the least trusted code. 
It is noted that the level of tiie ring hierarchy is independent to tiie level of ttie 
security protection of tiiat ring. 

Figure 1 A is a diagram illustrating a logical operating architecture 50 
according to one embodiment of tiie invention. The logical operating 
architecture 50 is an abstraction of the components of an operating system 
and ttie processor. The logical operating architecture 50 includes ring-0 10, 
rir^-1 20, rir^-2 30, ring-3 40, and a processor nub loader 52. The processor 
nub loader 52 is an instance of a processor executive (PE) handler. The PE 
handler is used to handle and/or manage a processor executive (PE) as will 
be discussed later. The logical operating architecture 50 has two modes of 
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operation: normal execution mode and Isolated execution mode. Each ring in 
the logical operating architecture 50 can operate in both modes. The 
processor nub loader 52 operates only in the isolated execution mode. 

Rlng-0 10 Includes two portions: a nomial execution Ring-0 1 1 and an 
isolated execution Ring-0 15. The nomial execution Ring^ 11 includes 
software modules that are critical for the operating system, usually refened to 
as kernel. These software modules include primary operating system (e g 
kemeO 12. software drivers 13. and hardware drivers 14. The isolated 
execution Ring-0 15 Includes an operating system (OS) nub 16 and a 
processor nub 18. The OS nub 16 and the processor nub 18 are instances of 
an OS executive (OSE) and processor executive (PE). respectively. The OSE 
and the PE are part of executive entities that operate In a secure environment 
associated with the isolated area 70 and the Isolated execution mode The 
processor nub loader 52 is a protected bootstrap loader code held within a 
chipset in the system and is responsible for loading the processor nub 18 from 
the processor or chipset into an Isolated area as wfll be explained later. 

SImllariy. ring-1 20. ring-2 30, and ring-3 40 include nomial execution 
nng-l 21. ring-2 31. ring-3 41. and isolated execution ring-1 25. ring.2 35 and 
nng-3 45. respectively. In particular, nomial execution ring-3 includes N 
applications 42i to 42^ and isolated execution ring-3 includes K applets 46i to 

4eK, 

One concept of the isolated execution architecture is the creation of an 
isolated region in ttie system memory, referred to as an Isolated area, which Is 
protected by both tiie processor and chipset in the computer system. Portions 
of the teolated region may also be in cache memoiy. Access to this isolated 
region is permitted only from a front side bus (FSB) of the processor, using 
special bus (e.g.. memory read and write) cycles, referred to as isolated read 
and write cycles. The special bus cycles are also used for snooping. The 
isolated read and write cycles are Issued by tt,e processor executing in an 
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isolated execution mode when accessing the isolated area. The isolated 
execution mode is initialized using a privileged instruction in the processor, 
combined with the processor nub loader 52. The processor nub loader 52 
verifies and loads a ring-0 nub software module (e.g., processor nub 18) into 
the isolated area. The processor nub 18 provides hardware-related services 
for the Isolated execution. 

One task of the processor nub loader 52 and processor nub 18 is to 
verify and load the ring-0 OS nub 16 into the isolated area, and to generate 
the root of a key hierarchy unique to a combination of the platform, the 
processor nub 18, and the operating system nub 16. The operating system 
nub 16 provides links to sen/ices in the primary OS 12 (e.g., the unprotected 
operating system), provides page management within the isolated area, and 
has the responsibility for loading ring-3 application modules 45, including 
applets 46i to 46k, into protected pages allocated In the isolated area. The 
operating system nub 16 may also load ring-0 supporting modules. 

The operating system nub 16 may choose to support paging of data 
between the isolated area and ordinary (e.g., non-isolated) memory. If so, 
then the operating system nub 16 is also responsible for encrypting and 
hashing the isolated area pages before evicting the page to the ordinary 
memory, and for checking the page contents upon restoration of the page. 
The isolated mode applets 46i to 46k and their data are tamper-resistant and 
monitor-resistant from all software attacks fi-om other applets, as well as from 
non-isolated-space applications (e.g., 42i to 42n), drivers and even the 
primary operating system 12. The software that can interfere wrth or monitor 
the applefs execution is the processor nub loader 52, processor nub 18 or the 
operating system nub 16. 

Figure 1B is a diagram illustrating accessibility of various elements In 
the operating system 10 and the processor according to one embodiment of 
the Invention. For illustration purposes, only elements of ring-0 10 and ring-3 
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40 are shown. The various elements in the logical operating architecture 50 
access an accessible physical memory 60 according to their ring hierarchy 
and the execution mode. 

The accessible physical memory 60 includes an isolated area 70 and a 
non-isolated area 80. The isolated area 70 includes applet pages 72 and nub 
pages 74. The non-Isolated area 80 includes application pages 82 and 
operating system pages 84. The isolated area 70 is accessible only to 
elements of the operating system and processor operating in isolated 
execution mode. The non-isolated area 80 is accessible to all elements of the 
ring-0 operating system and to the processor. 

The nonnal execution ring-0 11 including ttie primary OS 12, the 
software drivers 13. and Oie hardware drivers 14, can access both the OS 
pages 84 and the application pages 82. The nomial execution ring-3, 
including applications 42, to 42n. can access only to the application pages 82. 
Generally applications can only access to their own pages, however, the OS 
typically provides services for sharing memory in controlled methods. Both ttie 
normal execution ring-0 11 and ring-3 41, however, cannot access the isolated 
area 70. 

The isolated execution ring-0 15. including the OS nub 16 and the 
processor nub 18, can access to bofli of «ie isolated area 70. including tiie 
applet pages 72 and the nub pages 74. and flie non-isolated area 80, 
including the application pages 82 and the OS pages 84. The isolated 
execution ring-3 45, including applets 46i to 46k, can access only applet 
pages 72. The applets 46i to 46k reside in ttie isolated area 70. In general, 
applets can only access ttieir own pages; however, tfie OS nub 16 can also 
provides services for the applet to share memory (e.g., share memory wifli 
ottier applets orwitii non-isolated area applications). 
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Figure 1C is a diagram illustrating a computer system 100 in which one 
embodiment of the invention can be practiced. The computer system 100 
includes a processor 1 10, a host bus 120, a memory controller hub (MCH) 
130, a system memory 140, an input/output controller hub (ICH) 150. a non- 
volatile memory, or system flash, 160, a mass storage device 170, input/output 
devices 175. a token bus 180, a motherboard (MB) token 182, a reader 184, 
and a token 186. The MCH 130 may be integrated into a chipset that 
integrates multiple functionalities such as the isolated execution mode, host- 
to-peripheral bus Interface, memoiy control. Similarly, the ICH 150 may also 
be Integrated into a chipset together or separate from the MCH 130 to perfomi 
I/O functions. For clarity, not all the peripheral buses are shown. It is 
contemplated that the system 100 may also include peripheral buses such as 
Peripheral Component Interconnect (PCI), accelerated graphics port (AGP), 
Industry Standard Architecture (ISA) bus, and Unhrersal Serial Bus (USB), etc. 
The 'loken bus" may be part of the USB bus, e.g., it may be hosted on the 
USB bus. 

The processor 110 represents a central processing unit of any type of 
architecture, such as complex Instruction set computers (CISC), reduced 
Instruction set computers (RISC), very long instruction word (VLIW). or hybrid 
architecture. In one embodiment the processor 1 10 is compatible with an 
Intel Architecture (lA) processor, such as the Pentium™ series, the IA-32™ 
and the IA-64™. The processor 110 includes a normal execution mode 112 
and an Isolated execution circuit 115. The nomial execution mode 1 12 is the 
mode in which the processor 110 operates In a non-secure environment, or a 
nomial environment without the security features provided by the isolated 
execution mode. The isolated execution circuit 115 provides a mechanism to 
altow the processor 110 to operate In an Isolated execution mode. The 
isolated execution circuit 115 provides hardware and software support for the 
isolated execution mode. This support includes configuration for isolated 
execution, definition of an isolated area, definition (e.g., decoding and 
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execution) of isolated instrucBons, generation of isolated access bus cycles, 
and access checking. 

In one embodiment, the computer system 100 can be a single 
processor system, such as a desktop computer, which has only one main 
central processing unit, e.g. processor 110. In other embodiments, the 
computer system 100 can include multiple processors, e.g. processora 110, 
110a, 110b, etc.. as shown in Figure 1C. Thus, the computer system 100 can 
be a multi-processor computer system having any number of processors. For 
example, the multi-processor computer system 100 can operate as part of a 
server or woricstation environment The bask: description and operation of 
processor 110 will be discussed In detail below. It will be appreciated by those 
skilled in the art that the basic description and operation of processor 110 
applies to the other processora 110a and 110b, shown in Figure 1C, as well as 
any number of other processora that may be utilized in flie multi-processor 
computer system 100 according to one embodiment of the present invention. 

The processor 1 1 0 may also have multiple logical processora. A logical 
processor is a functional unit wittiin a physical processor having an 
architectural state and physical resources allocated according to some 
partitioning policy. A multi-processor system (e.g.. the system comprising the 
processora 110, 110a, and 110b) may have multiple multi-logical processora. 

The host bus 120 provkles interface signals to allow tiie processor 1 10 
or processora 110, 100a, and 110b to communicate witti ottier processora or 
devfces, e.g.. tiie MCH 130. In addition to nornial mode, the host bus 120 
provides an isolated access bus mode witti corresponding interface signals for 
memory read and write cycles. The isolated access bus mode is asserted on 
memory accesses initiated while ttie processor 1 10 Is in the isolated execution 
mode and it is accessing memory witiiin ttie Isolated area. The isolated 
access bus mode is also asserted on insbuction pre-fetch and cache write- 
back cycles if tiie address is wittiln tiie isolated area address range. The 
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isolated access bus mode is configured within the processor 1 10. The 
processor 110 responds to a snoop cycle to a cached address when the 
isolated access bus mode on the FSB matches the mode of the cached 
address. 

The MCH 130 provides control and configuration of system memory 
140. The MCH 130 provides Interface circuits to recognize and service 
isolated access assertions on memory reference bus cycles, including isolated 
memory read and write cycles. In addition, the MCH 130 has memory range 
registers (e.g., base and length registers) to represent the isolated area in the 
system memory 140. Once configured, the MCH 130 aborts any access to the 
isolated area that does not have the isolated access bus mode asserted. 

The system memory 140 stores system code and data. The system 
memory 140 is typically implemented with dynamic random access memory 
(DRAM) or static random access memory (SRAM). The system memory 140 
includes the accessible physical memory 60 (shown in Figure 1 B). The 
accessible physical memory includes a loaded operating system 142, the 
isolated area 70 (shown in Figure IB), and an isolated control and status 
space 148. The loaded operating system 142 is the portion of tfie operating 
system ttiat is loaded into the system memory 140. The loaded OS 142 is 
typically loaded firom a mass storage device via some boot code in a boot 
storage such as a boot read only memory (ROM). The isolated area 70, as 
shown in Figure 1 B, Is ttie memory area ttiat is defined by the processor 1 1 0 
when operating in the isolated execution mode. Access to tiie isolated area 
70 is restricted and is enforced by tiie processor 110 and/or ihe MCH 130 or 
other chipset tiiat integrates tiie isolated area functionalities. The isolated 
control and status space 148 is an input/output (l/0)-like, independent address 
space defined by the processor 110. The isolated conti-ol and status space 
148 contains mainly tiie isolated execution control and status registers. The 
isolated control and status space 148 does not overlap any existing address 
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space and is accessed using the isolated bus cycles. The system memory 
140 may also include other programs or data that are not shown. 

The ICH 150 represents a known single point in the system having tiie 
isolated execution functionality. For clarity, only one ICH 150 is shown. The 
system 100 may have many ICH's similar to the ICH 150. When there are 
multiple ICH's, a designated ICH is selected to control the isolated area 
configuration and status, in one embodiment, this selection is perfonned by 
an extemal strapping pin. As is known by one skilled in the art, other methods 
of selecting can be used, including using programmable configuring registers. 
The ICH 150 has a number of functionalities that are designed to support the 
isolated execution mode in addition to the traditional I/O functi*ons. In 
particular, the ICH 150 includes an isolated bus cycle Interface 152, the 
processor nub loader 52 (shown in Figure 1A), a digest memory 154, a 
cryptographic key storage 155, an isolated execution logteal processor 
manager 156, and a token bus Interlace 159. 

The isolated bus cycle interface 152 includes circuitry to interface to the 

isolated bus cycle signals to recognize and service isolated bus cycles, such 

as the isolated read and write bus cycles. The processor nub loader 52, as 

shown in Figure 1A, includes a processor nub loader code and its digest (e.g., 

cryptographic hash) value. The processor nub loader 52 is invoked by 

execution of an appropriate isolated instruction (e.g., Isojnit) and is 

transferred to the isolated area 70. From the isolated area 80, the processor 

nub loader 52 copies tiie processor nub 18 from the system flash memory 

(e.g., tiie processor nub code 18 in non-volatile memory 160) into the isolated 

area 70, verifies and logs its integrity, and manages a symmetric key used to 

protect the processor nub's secrets. In one embodiment, the processor nub 

loader 52 is implemented In read only memory (ROM). For security purposes, 

the processor nub loader 52 is unchanging, temper-resistent and non- 

substituteble. The digest memory 154, typically implemented in RAM, stores 

the digest (e.g., cryptographic hash) values of the loaded processor nub 18, 
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the operating system nub 16. and any other supervisory modules (e.g.. ring-0 
modules) loaded into the isolated execution space. The cryptographic key 
storage 1 55 holds a symmetric encryption/decryption key that is unkjue for the 
platfomi of the system 100. In one embodiment, the cryptographic key 
storage 155 includes Internal fuses that are programmed at manufacturing. 
Alternatively, the cryptographic key storage 155 may also be created during 
manufacturing with a cryptographic random number generator. The isolated 
execution logical processor manager 156 manages the operation of logical 
processors configuring their isolated execution mode support. In one 
embodiment, the isolated execution logical processor manager 156 Includes a 
logical processor count register that tracks the number of logical processors 
participating in the isolated execution mode. The token bus interface 159 
interfaces to the token bus 180. A combination of the processor nub loader 
digest, the processor nub digest, the operating system nub digest, and 
optionally additional digests, represents the overall isolated execution digest, 
referred to as isolated digest The isolated digest Is a fingerprint Identifying 
the all supervisory code Involved in controlling the Isolated execution 
configuration and operation. The isolated digest is used to attest or prove the 
state of the cun-ent isolated execution environment. 

The non-volatile memory 160 stores non-volatile Information. Typlcally._ 
the non-volatile memory 160 Is implemented in flash memory. In one 
embodiment, the non-volatile memory 160 includes the processor nub 18. " 
The processor nub 18 provides set-up and low-level management of the 
isolated area 70 (In the system memory 140), Including verification, loading, 
and logging of the operating system nub 16, and the management of the 
symmetric key used to protect the operating system nub's secrets. The 
processor nub loader 52 performs some part of the setup and 
manages/updates the synunetric key before the processor nub 18 and the OS 
nub 16 are loaded. The processor nub 18 The processor nub 18 may also 
provkle Interface abstractions.to low-level security services provided by other 
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hardware. The processor nub 18 may also be distributed by the original 
equipment manufacturer (OEM) or operating system vendor (OSV). 

The mass storage device 170 stores archive Information such as code 
(e.g., processor nub 18), programs, files, data, applications (e.g., applications 
42i to 42n), applets (e.g., applets 46i to 46k) and operating systems. The 
mass storage device 170 may include compact disk (CD) ROM 172, floppy 
diskettes 174, and hard drive 176, and any other storage devices. The mass 
storage device 170 provides a mechanism to read machine-readable media. 
When implemented in software, the elements of the present invention are the 
code segments to perform the necessary tasks. The program or code 
segments can be stored in a processor readable medium or transmitted by a 
computer data signal embodied in a carrier wave, or a signal modulated by a 
earner, over a transmission medium. The "processor readable medium" may 
include any medium that can store or transfer infonnation. Examples of the 
processor readable medium include an electronic circuit, a semiconductor 
memory device, a ROM, a flash memory, an erasable programmable ROM 
(EPROM), a floppy diskette, a compact disk CD-ROM, an optical disk, a hard 
disk, a fiber optical medium, a radio frequency (RF) link, etc. The computer 
data signal may include any signal that can propagate over a transmission 
medium such as electronic networi( channels, optical fibers, air, 
electromagnetic, RF links, etc. The code segments may be downloaded via 
computer networics such as the Internet, an Intranet, ete. 

I/O devices 175 may include any I/O devices to perfomi I/O functions. 
Examples of I/O devices 175 include a controller for input devices (e.g., 
keyboard, mouse, trackball, pointing device), media card (e.g., audio, video, 
graphics), a network card, and any other peripheral controllers. 

The token bus 180 provides an interface between the ICH 150 and 
various tokens in the system. A token is a device that perfomis dedicated 
input/output functions with security functionalities. A token has characteristics 
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Similar to a smart card, including at least one reserved-purpose public/private 
key pair and the ability to sign data with the private key. Examples of tokens 
connected to the token bus 180 include a motherboard token 182, a token 
reader 184, and other portable tokens 186 (e.g.. smart card). The token bus 
interface 159 in the ICH 150 connects through the token bus 180 to the ICH 
150 and ensures that when commanded to prove the state of the isolated 
execution, the corresponding token (e.g., the motherboard token 182, the 
token 186) signs only valid isolated digest information. For purposes of 
security, the token should be connected to the digest memory via the token 
bus 180. 

MANAGING ACCESSES IN ISOLATED EXECUTION MODE 

Figure 2A is a diagram illustrating the Isolated execution circuit 115 
shown in Figure 1C according to one embodiment of the invention. The 
isolated execution circuit 115 includes a core execution circuit 205, an access 
manager 220, and a cache memory manager 230. 

The core execution unit 205 includes an instruction decoder and 
execution unit 210 and a translation lookaside buffer (TLB) 218. The 
instruction decoder and execution unit 210 receives an instruction stream 215 
from an instruction fetch unit The instruction stream 215 includes a number of 
instructions. The instruction decoder and execution unit 210 decodes the 
Instructions and executes the decoded instructions. These instructions may 
be at the micro- or macro- level. The instruction decoder and executton unit 
210 may be a physical circuit or an abstraction of a process of decoding and 
execution of instructions. In addition, the instructions may include isolated 
insfaucb'ons and non-isolated instiuctions. The instruction decoder and 
execution unit 21 0 generates a virtual address 21 2 when there is an access 
transaction. The TLB 218 translates the virhjai address 212 into a physical 
address. 
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The core execution circuit 205 interfaces witli ttie access manager 220 
via control/status Infbnnation 222. operand 224. and access information 226. 
Tlie control/status infbmiation 222 includes control bits to manipulate various 
elements in the isolated bus cycle generator 220 and status data from the 
access manager 220. The operand 224 includes data to be written to and 
read from the access manager 220. The access information 226 includes 
address (e.g., the physical address provided by the TLB 218). readAwrite, and 
access type infonnatlon. 

The access manager 220 receives and provides the control/status 
information 222. the operand 224, receives the access inft)nnation 226 from 
the core execution circuit 205 as a result of instruction execution, receives a 
cache access signal 235 from ttie cache memory manager 230. and receives 
an external isolated access 278 from another processor in the system. The 
access manager 220 generates an isolated access signal 272. an access 
grant signal 274, and a processor snoop access signal 276. The isolated 
access signal 272 may be used to generate an isolated bus cycle 230 sent to 
devices (e.g., chipsets) extemal to the processor 110 to indicate ttiat flie 
processor 110 is executing an isolated mode insfruction. The processor 
snoop access signal 276 may be used by ottier devices or chipsets to 
detemiine If a snoop access Is a hit or a miss. The isolated access signal 272. 
the access grant signal 274. and ttie processor snoop access signal 276 may 
also be used intemally by the processor 1 10 to control and monitor ottier 
isolated or nonisolated activities. 

The cache memory manager 230 receives the access infonnation 226 
from the core execution circuit 205 and generates tfie cache access signal 235 
to the access manager 220. The cache memory manager 230 includes a 
cache memory 232 to store cache information and other circuits to manage 
cache transactions as knovwi by one skilled in ttie art The cache access 
signal 235 indicates ttie result of ttie cache access. In one embodiment, ttie 
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cache access signal 235 is a cache miss signal which is asserted when there 
is a cache miss from a cache access. 

Figure 2B is a diagram illustrating the access manager shown in Figure 
2A according to one embodiment of the invention. The access manager 220 
includes a configuration storage 250 and an access checking circuit 270. The 
access manager 220 exchanges operand 224 with and receives the access 
infomiation 226 from the core execution circuit 205 shovim in Figure 2A. The 
access manager 220 also receives the cache access signal 235 firom the 
cache manager 230 and the external isolated access 278 from another 
processor as shown in Figure 2A. The access infomiation 226 includes a 
physical address 282, a read/write (RD/WFWif) signal 284 and an access type 
286. The access infonnation 226 is generated during an access transaction 
by the processor 1 10. The access type 286 indicates a type of access, 
including a memory reference, an input/output (I/O) reference, and a logical 
processor access. The logical processor access includes a logical processor 
entry to an isolated enabled state, and a logical processor withdrawal from an 
isolated enabled state. 

The configuration storage 250 contains configuration parameters to 
configure an access transaction generated by the processor 1 10. The 
processor 110 has a nonnal execution mode and an Isolated execution mode. 
The access transaction has access infonnation. The configuration storage 
250 receives the operand 224 ft-om the instruction decoder and execution unit 
210 (Figure 2A) and includes a pnDcessor control register 252 and an isolated 
setting register 260. The processor control register 252 contains an execution 
mode word 253. The execution mode word 253 is asserted when tiie 
processor 110 is configured in ttie isolated execution mode. In one 
embodiment, tiie execution mode word 253 is a single bit indicating if tiie 
processor 1 10 Is in the isolated execution mode. The isolated setting register 
260 contains an isolated setting 268. The isolated setting 268 defines the 
Isolated memory area (e.g.. ttie isolated area 70 in the system hfiemory 140 
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Shown in Figure 1C). The isolated setting register 260 includes a masic 
register 262 and a base register 264. The mask register 262 contains an 
isolated mask value 263. The base register 264 contains an Isolated base 
value 265. The isolated mask and base values 263 and 265 fomi the isolated 
setting 268 and are used to define the Isolated memory area. 

The access checking circuit 270 checks the access transaction using at 
least one of the configuration parameters and the access information 226. 
The access checking circuit 270 .generates the isolated access signal 272, the 
access grant signal 274, and the processor snoop access signal 276 using at 
least one of tfie isolated area parameters in ttie configuration storage 250 and 
the access infbmiation 226 in a transaction generated by ttie processor 110. 
The Isolated access signal 272 is asserted when the processor 110 is 
configured in the Isolated execution mode. The grant signal 274 is used to 
indicate if an isolated access has been granted. The processor snoop access 
signal 276 is used to detennine if an isolated access results in a hit or a miss. 

Figure 3A is a diagram illustrating the access checking circuit 270 to 
manage snoop accesses according to one embodiment of the invention. The 
access checking circuit 270 includes an address detector 310. an access grant 
generator 320, and a snoop checking circuit 330. 

The address detector 310 receives ttie Isolated setting 268 (e.g., the 
Isolated mask value 263, ttie isolated base value 265) firom the configuration 
storage 250 in Rgure 2B. The address detector 310 detects if the physical 
address 282 is within the isolated memory area defined by the Isolated setting 
260. The address detector 310 includes a masking element 312. a 
comparator 314, and a combiner 318. The masking element 312 masks the 
physical address 282 with the Isolated mask value 263. In one embodiment, 
the masking element 312 perfbmw a logical AND operation. The comparator 
314 compares the result of the masking operation done by ttie masking 
element 312 and ttie Isolated base value 265, and generates a comparison 
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result The combiner 318 combines the comparison result with other 
conditions to generate the isolated access signal 272. The isolated access 
signal 272 Is asserted when the physical address 282 is within the isolated 
memory area as defined by the isolated mask and base values 263 and 265. 
respectively, and when other conditions are satisfied. It is noted that the mash 
could also be used as a length. 

The access grant generator 320 combines the Isolated access signal 
272 and the execution mode word 253 to generate an access grant signal 
274. The access grant signal 274 is asserted when both the isolated access 
signal 272 and the execution mode word 253 are asserted to indicate that an 
isolated access is valid or allowed as configured. In one embodiment, the 
access grant generator 320 performs a logical AND operation. 

The snoop checldng circuit 330 generates the processor snoop access 
signal 276. The snoop checking circuit 330 includes a snoop combiner 340 to 
combine the cache access signal 235. the isolated access signal 272, and an 
extemal isolated access signal 278 from another processor. The combined 
cache access signal 235, the isolated access signal 272 and the extemal 
isolated access signal 278 correspond to the processor snoop access signal 
276. In one embodiment, the snoop combiner 340 includes an exclusive-OR 
(X-OR) element 342 and an OR element 344. The X-OR element 342 
perfbmis an exclusive-OR operation on the isolated access signal 272 and the 
extemal isolated access 278. The OR element 344 perfomis an OR operation 
on the result of the X-OR element 342 and the cache access signal 235. 

Figure 3B is a diagram Illustrating the access checking circuit 270 to 
manage logical processor operations according to another embodiment of the 
invention. The access checking circuit 270 includes a logical processor 
manager 360. 
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The logical processor manager 360 manages a logical processor 
operation caused by the logical processor access. The logical processor 
manager 360 Includes a logical processor register 370. a logical processor 
state enabler 382. a logical processor updater 380. a minimum detector 374 
and a maximum detector 376. The logical processor register 370 stores a ' 
logical processor count 372 to Indicate a number of logical processors 
currently enabled. The logical processor state enabler 382 enables a logical 
processor state when the logical processor access is valid. The logical 
processor updater 380 updates the logical processor count 372 according to 
the logical processor access. The logical processor updater 380 is enabled by 
the enabled logical processor state. The minimum detector 374 detemiines If 
the logical processor count 372 is equal to a minimum logical processor value 
(e.g.. zero). The maximum detector 376 detemiines if the logical processor 
count 372 exceeds a maximum logical processor value. The maximum logical 
processor value Is a number Indicating the maximum number of logical 
processors that can be supported by the isolated execution mode in the 
processor 110. 

The logical processor updater 380 initializes the logical processor 
register 370 when there Is no enabled logical processor. The logical processor 
updater 380 updates the logical processor count 372 in a first direction (e g 
incrementing) when the access transaction corresponds to the logical 
processor entry. The logical processor updater 380 updates the logical 
processor count 372 in a second direction opposite to the first direction (e.g 
decrementing) when the access transaction corresponds to the logical 
processor exit or a logical processor withdrawal. When the logical processor 
count 372 Is equal to the minimum logical processor value, the logical 
processor manager 360 causes the processor 110 to initialize or dear (e.g.. 
wrrte back all ISO data to main memory) the cache memory 232 (Figure 2A) 
and the Isolated setting register (Rguie 2A) from all Isolated Infbmiation. 
When tt)e logical processor count 372 exceeds the maximum logical processor 
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value, the logical processor manager 360 causes the processor 1 1 0 to 
generate a failure or feult condition. 

Figure 4 is a flowchart Illustrating a process 400 to manage snoop 
accesses for isolated execution according to one embodiment of ttie invention. 

Upon START, the process 400 defines an isolated memory area using 
ttie isolated setting (e.g., isolated mask and base values) (Block 410). Then, 
tiie process 400 asserts the execution mode word in ttie processor control 
register to configure ttie processor in ttie isolated execution mode (Block 420). 
Next, ttie process 400 detemiines if tiie physical address as generated in a 
tiansaction is wittiln the isolated memory area as defined by tiie isolated 
setting (Block 430). If not, ttie process 400 generates a failure or fault 
condition (Block 435) and is ttien temiinated. Othenwise, ttie process 400 
asserts the isolated access signal (Block 440). 

Next, the process 400 generates a processor snoop access signal by 
combining ttie cache access signal, ttie external isolated access signal, and 
ttie isolated access signal. Then ttie process 400 is terminated. 

Figure 5 is a flowchart illustrating a process 500 to manage logical 
processor operations for isolated execution according to one embodiment of 
the invention. 

Upon START, ttie process 500 initializes the logical processor register 
when fliere is no enabled logical processor (Block 510). This is done with 
tSO_Create. Then ttie process 500 executes a logical processor access 
instruction (e.g., iso_create, iso_clear) (Block 520). The logical processor 
access instruction asserts ttie execution mode word. Next, ttie process 500 
enables ttie logical processor state (Block 525). Then, ttie process 500 
determines the logical processor access type (Block 530). 
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500 updates fte togfca, p™=e«or count in a d,„c.ion 1 
.c^ntna, (Bkxk «0, Then, p^cess 500 deten„i„es ^It^L, 

not the prooe^ 500 tennlnated. Othe^fee, ,ha p^cess 500 genera 
fe.toorbul,oond,tlo„(Btoo,seO)andis.he„,em,inated. 

If the logrcal processor access type h a logical pnKesso, exit or Ionic, 
P««essor ...hdrawal, me p^cess 500 updates the logteai p^^Cmt 
a^co^direc«onopposte.o.h,fl.,d,«c«on(e.g..L,l:^(n'" 
Then, .he process 600 detennhes ifth, Ic^k^I p^cessordt^ua, 

to the minimum value (e.g zeroWBlorir^m u ^1 • wuni is equal 

.e™j^.ed^0.he,w^,,ep™=ess^ 

CONTROLUNG ACCESSES TO ISOWTED MEMORY USINGA 
MEMORY CONTROOER 

■nm above description lefere to the isolated execution process in the 

Tz^o^'"- r^'°-'^'--va»a70(sh™;i 

mreLs^^"*~"*'**'"*^'^"^^».«-processor 
1 10 needs to conflgure the memory conHguraUon storage in the MCH 130 
aocordingly. T1« MCH 130 also includes con*o,»,„cti^,toTJ;i''° 

processor 1 10 ,0 access the mernory ,40 In non^ memoTa^ 80 as 
~»««-o«edacce,ss,na,«.(Rgu,eZ,orthehuscyc. 
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In Figure 1C, the MCH 130 is shown external to the processor 110. 
However, it is possible for the MCH 130 to be included inside the processor 
110. In this case, a write cycle to the registers In the MCH 130 is externalized 
to allow any external cache to participate for cache coherency. 

In essence, the access controller in the MCH 130 perfomis a similar 
function as the access checking circuit 270 shown in Figure 3A. By 
maintaining access consistency in both processor 1 10 and MCH 130, 
accessing memory can be tightly controlled. The access controller in the MCH 
130 determines if an access transaction from the processor 1 10 Is valid. If it 
is, the access controller returns an access grant signal to allow completion of 
the access transaction. Otherwise, a failure or fault condition is generated. In 
addition, the access controller in the MCH 130 also protects any intentional or 
accidental writing to its own configuration and control storage. Since the MCH 
130 is directly interfaced to the memory 140, the access controller also 
provides initlatong contents of tiie isolated memory area and its own internal 
storage upon reset 

Figure 6 is a diagram illustrating the isolated area access controller 135 
In the memory controller hub (MCH) 130 shown in Figure 1C accorxJing to one 
embodiment of tiie invention. The access controller 135 includes a 
configuration storage 610, a configuration controller 640, and an access grant 
generator 650. 

The configuration storage 610 contains a configuration setting 612 to 
configure an access transaction generated by ttie processor 110 shown in 
Figure 1C. The processor 1 10 has a normal execution mode and an isolated 
execution mode. The access ti^nsacb'on has access Infomiation 660. The 
access infomnation 660 is carried over tfie host bus 120 (Figure 1C) and 
Includes address infonmafion and isolated access state. The address 
information is represented by a physical address 662. The isolated access 
state is represented by the isolated access signal 664. The isolated access 
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FigursZ ^e-oolated access,^ 684 rsas«*d when the pracessor 110 
serrate, a vaM retoenoe to the isdated n«mo,y area 70 (Shorn, in Rgu« 
10). The configunatlon setting 612 include, a memory mask value 622 and a 
memov base value 632. Tl» memov mask and base values 622 and 632 
a» th. t*o eounten3art values of the isolated mask and base values 263 and 
265 respectively, as discussed in connectton with Figure 2. The memon, 

mask and base value, 622 and 632 delhe the isolated memory area 70 in the 
-nemoor 140 external to the p««esa.r 110. As discussed earner, the isolated 
n«mo,y area 70 is accessibk, to the processor 1 10 in the isolated execution 
n-ode^The conflguratton storage 610 Includes a memory mask register 620 to 

Store the memory mask value 622 and a memory base register 630 to Store 
trie memory base value 632, 

The configuration controller 640 controls access to the configuration 
storage 610 and provides some control functions to the memory 140 The 
access grant generator 650 generates an access grant signal 652 using the 
configuration setting 612 and the access inf6m,ation 660. The access grant 
signal 652 indicates if the access transaction is valid. If the access is not 
granted, the chipset will return a predetemiined data value. This prevents 
hveloclc It also hides the existence of an Isolated Area. 

P'9ure 7 is a diagram illustrating the configuration controller 640 shown 
m Figure 6 according to one embodiment of the invention. The configuration 
controller 640 includes a control storage 710. a locker 720. a prioritizer 730 
and a resetter 740. 

The control storage 710 is Interfaced to the host bus 120 to receive and 
storB a lock control word 712. The lock control word 712 Indicates if the 
«olatBd memory area 18 enabled. Typically the lock contiolwoixl 712 is written 
by the processor nub 18 when It is invoked to enable or initialize the Isolated 
memoor area 70. The tock control word 712 may be a single bit to indicate if 
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locking is desired. Locking is an operation to prevent a storage from being 
overwritten by an inadvertent or intentional vwite operation by other devices. 

The locker 720 locks access to the configuration storage 610 based on 
the lock control word 712. When the lock control word 712 is asserted (e.g., 
the lock control bit is set in enable state), the locker 720 protects the 
configuration storage 610 from being written or modified. The locker 720 
disallows updates to the MCH control registers. The locker 720 can be 
implemented in a number of ways. In one mettiod, the locker may be a gating 
element (e.g.. an OR gate for a positive logic) to gate tiie read/ write signal 
(R/W#) from the processor with tiie lock confrol word 712. When the lock 
conti-ol word 712 is asserted high, tiie write function is disabled, inhibiting a 
write to tiie configuration storage 610. 

The prioritizer 730 prioritizes the access tiansaction based on ttie lock 
control word 712. This prioritization allows tiie memory mask and base values 
622 and 632 to take precedence over any oflier memory decoding. In other 
words, all addressing in the configured isolated memory area and control 
registers is handled by the MCH 130 regardless of whettier tfiere is memory 
backing this range or not Otiier configuration registers such as top of 
memory, memory hole registers will not violate ttiis requirement because of 
tile locker 720. This prioritization ensures ttiat code residing in tiie non- 
isolated memory area (e.g., area 80 in tiie memory 140 shown in Figure 2B) 
cannot alter the top of memory, memory range, or memory hole settings to 
make contents of ttie isolated memory area 70 disappear or move. In one 
embodiment, ttie prioritizer 730 includes a bus cycle decoder 732 and a 
priority encoder 734. The bus cycle decoder 732 decodes ttie bus cycle from 
the bus cycle signals as generated by the processor 110. The bus cycle may 
be one of a normal and special bus cycle. The nomial bus cycle corresponds 
to the nomnal execution mode. The special bus cycle corresponds to the 
isolated execution mode. Examples of ttie special bus cycle include a read/ 
vwite data access cycle, a read/write control access cycle, a logical processor 
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e|*y cycle, and a tegical precesMT Withdrawal cycle. The prtortly encoder 

^ encodes fl,e decoded bu. cyde a, enabled by fte lock conW wort 712 
The pnorteer 730 generates an IsdaM men««y priority signal 736 to the 

access grant generatoreso. His no. memory access that gets priority, itis 
the locker that prevents changes to the configuration registers. 

The resetter 740 initializes the isolated memory area 70. the 
configuration storage 610, and the control storage 710 upon reset The 
resetter 740 includes a write drcuHto write initial values (e.g., an aro^s, all 
one s, a constant) to all memory, the conSgwation storage 610, and the 
control storage 710 when a reset is triggered. 

Figure 8 Is a diagram illustrating the access grant generator 680 shown 
-n F«u„ 6 according to one embodiment of the fnven«on. V. access grT 

9enerator660lncludesanadd,essdetector810andanacoe,sgrant 
combiner 820. 

'ff'"''<*»«<'»l«tor 810 detects ifthe physical address 652 Is wi^^^ 
thejsolated memory area 70. The address det«itcr 810 generates an 

etrrr'^*'^^ ^""■^"•^^^Olncludesamasl^ng 
element 812. a comparator 814, arKi an address detect combiner 820. The 
maskmg element 812 mesks the physfeal add»s. 652 with the memory 
masking value 622. in one embodiment, the masking element 812 
miplementsanANDoperatk-n. The comparator 814 compares the masked 
Physrcal address with the memory base value 632. The comparator 814 
9ene,«es a matching result 816 correspondl^ to the address matching signal 
82!. Tke address detect combiner 820 combine, the matching result 816 with 
«tea«oneacoes,condilton818. The combined matehing result 816 and the 
at leas^ one access condMon 818 provides the add»ss matching signal 822 

h.add*on, the address detect combiner 820 may also be gated or enabled by 

the isolated men»ry priority Signal 736 as generated by the prioritizer 730 
shown In Figure 7. r 
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The access grant combiner 830 combines the address matching signal 
822 (from the address detector 810) and the isolated access signal 664 (from 
the access information 660) to generate the access grant signal 652. The 
access grant combiner 830 ensures that a matched physical address is 
accompanied by a valid processor reference to the isolated memory area as 
indicated by the isolated access signal 664. 

Figure 9 is a flowchart illustrating a process 900 to control access to 
memory according to one embodiment of the invention. 

Upon START, the process 900 configures the access transaction in the 
MCH (Block 910). This configuration includes writing configuration setting into 
the configuration storage, e.g., storing memory masl< and base values in 
memory mask and base registers. Next, the process 900 configures access 
control to the configuration storage (Block 91 5) by storing the lock control word 
In the control storage. The process 900 then locks access to the configuration 
storage based on the lock control word (Block 920). The lock control block 
could prevent any accesses to the configuration. Therefore, all accesses to 
the configuration after lock are feults. 

Next, the process 900 receives an access transaction firom the 
processor and decodes the access bus cycle (Block 925) and prioritizes the 
access transaction based on the lock control word (Block 930). Then, the 
process 900 detennines if oOier access conditions are satisfied (Block 935). If 
not, the process 900 generates a fiailure or fault condition (Block 940) and is 
then tenniiiated. Otherevise, the process detemiines if the physical address is 
within the isolated memory area as defined by the memory mask and base 
values (Block 945). If not, the process 900 generates an access grant signal 
for nonnal execution mode (Block 950) and is then terminated. Otherwise, the 
process 900 generates an access grant for isolated execution mode (Block 
955). This includes generating an address matching signal indicating if the 
physical address is wittiin the isolated memory area, and combining the 
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Signal and the Isolated access signal ,o gene^te access 
fl«nt »gna Gen«a«ng ihe address matching s^nal Includes masKing r^ 

Phys|caadd,esswi,hthen»n„,y„as«ng value and compartngthe^^^ 
PhysK».add.essw,,H,,»„^^3eva,uetcge„e^:„«l;'::i':' 

Nex..theproces,800dete™inesifa«setistriflge«d(Blcclc960) If 
no^ tt,e p^cess 900 Is tenninated. OlheMs., the p^cess 900 initialJU 

(Block 965). The process 900 is then tennlnaled. 

While this invention has been descrtbed with «fe«nce to illustrative 

-*«i«»nts,,hlsdescrtp«on,sno,intendedtobeconstn,edlnalJ^ 
sem^ Venous modrfications of fl,e illustmtive embodknents. as well as other 
«^«»ntsof«,elnvention,„h«,areapparen.t^ 
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What is claimed is: 

1 . An apparatus comprising: 

a configuration storage containing a configuration setting to configure 
an access transaction generated by a processor liaving a normal execution 
mode and an isolated execution mode, the access transaction having access 
information; 

a configuration controller coupled to the configuration storage to control 
access to the configuration storage; and 

an access grant generator coupled to ttie configuration storage to 
generate an access grant signal using the configuration setting and the access 
information, the access grant signal indicating If the access transaction is 
valid. 

2. The apparatus of claim 1 wherein the configuration setting 
includes a memory mask value and a memory base value, the memory mask 
and base values defining an isolated memory area In a memory external to the 
processor, the isolated memory area being accessible to the processor in the 
isolated execution mode. 

3. The apparatus of daim 2 wherein the configuration storage 
comprises: 

a memory mask register to store ihe memory mask value; and 
a memory base register to store the memory base value. 

4. The apparatus of claim 3 wherein the access information 
includes a physical address and an isolated access state, ihe isolated access 
state being provided by an isolated access signal, the isolated access signal 
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Mc^hL'^T-T'" ^ '«* """"-I "O"". <he 10* con»ol wort 
'ndioating the isolateO memoiy area fe enabled: and 

^a^c^r*.^acoeesta«»con«,„„«,„3,,^e^3edo„.heW 



word. 



a prtortBzer to prtorttfee the access transaction l«sed on the lode oontral 



7. Theappawusofdalmewhereintheconflguralionoontroller 

further comprises: 

a ^setter to Initialize the Isolated memory area, the confisuratlon 
storage, and the control stoiase upon reset 

compHL: '^''^""*''*»"^«*""'»'«»accessgran.genera,or 
an address detector to detect if fte physical address is within the 

an aoces. grant combiner coupled to the address detector to combine 
iTd^r.T^ ^ 

::rgrzr'"'"^^--^^-~"»to.he 
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9. The apparatus of claim 8 wherein the address detector 
comprises: . 

a masking element to mask the physical address with the memory 
masking value; and 

a comparator to compare the masked physical address with the 
memory base value, the comparator generating a matching result 
corresponding to the address matching signal. 

1 0. The apparatus of claim 9 wherein the address detector further 
comprises: 

an address detect combiner to combine the matching result with at least 
one access condition, the combined matching result and the at least one 
access condition providing the address matching signal. 

11. A method comprising: 

configuring an access transaction generated by a processor having a 
nomial execution mode and an isolated execution mode using a configuration 
storage containing a configuration setting, the access transaction having 
access infomiation; 

controlling access to the configuration storage; and 

generating an access grant signal using the configuration setting and 
the access Infomnation, the access grant signal indicating if tiie access 
transaction is valid. 

12. The method of claim 1 1 wherein tiie configuration setting 
includes a memory mask value and a memory base value, the memory mask 
and base values defining an isolated memory area In a memory external to the 
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isolated execution mode. f<»=5orintn8 

13. The memod of daln, 12 Wherein configuring (he access 

transaction comprises: 

storing the memory mask value In a memoo. mask register; and 
storing the memory base value In a memory base register. 

a physical address and an isolated access state, the Isolated access state 

15 Themethodofclalm14whereincontrollingaccesstothe 
configuration storage comprises: 

storing a lock control word, the lock control word Indicating If the 
isolated memory area is enabled; and 



word. 



locking access to the configuration storage based on the lock control 



16. Themethodofdaimiswherelncontrollingaccesstothe 
configuration storage further comprises: 



prioritizing the access transacfion based on the k>ck 



control word. 



17. The method ofclalm 16 wherein controlling access to the 
configuration storage further comprises: 

inifialfeing the Isolated memoiy area, the configuiatlon storage, and the 
control storage upon reset. 
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1 8. The method of claim 1 7 wherein generating the access grant 
signal comprises: 

generating an address matching signal indicating if the physical 
address is within the isolated memory area; and 

combining the address matching signal and the isolated access signal, 
the combined address matching signal and the isolated access signal 
corresponding to the access grant signal. 

1 9. The method of daim 1 8 wherein generating the address 
matching signal comprises: 

masking the physical address with the memory masking value; and 

comparing the masked physical address with the memory base value to 
generate a matehing result corresponding to the address matching signal. 

20. The method of claim 1 9 wherein generating the address 
matching signal further comprises: 

combining the matching result with at least one access condition, the 
combined matching result and the at least one access condition providing the 
address matching signal. 

21. A computer program product comprisir^: 

a machine readable medium having computer program code therein, 
the computer program product comprising: 

computer readable program code for configuring an access transaction 
generated by a processor having a nomial execution mode and an isolated 
execution mode using a configuration storage containing a configuration 
setting, the access transaction having access infonnat'on; 
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computer readable program code for controlling access to the 
configuration storage; and 

u.rn.r'T"""""'"""'"'"''*""^"''*"^'"^^™* signal 
u.,ng the co„fi9u«ton se«i„ga™.«» access Wbnnaflon, «,eac«ssg«rt 
signal indicating itthe access transaction is vaM. 

22. computer prcgram product of claim 21 Wherein the 
com^uration setting includes a memory masic value and a memory base 
val», the memoiy mask and l«se values defining an isolated memory area h 
a memory external to the processor, the isolated memory area being 
aecesaible to the precessor In the isolated execution mode. 

23. ■n»««'PUterprog,amprcductofclaim22v*ereinthecomputer 
»adablepregremcodeferconligu,hgtheacces.t.Bn,action comprises: 

a mS^. '^'^ code fbr storing the memory mask value m 

a memoiy masl< reglsten and 

computer readable program code for storing the memory base value In 
a memory base register. 

24. Thecomputerprogramproductofclaim23whereintheaccess 
.nfom,at,on Includes a physical address and an Isolated access state the 

a^r ''""^ ^" ^ ^'S-'. isolated 

tott^eZZ^ ' "^"^ ^^'^^'^^^ « -^-nce 

to the isolated memory area. 

25. Thecomputerprogramproductofclaim24whereinthecomputer 
~dabl. program code lor controlling access to the conliguretton storage 

comprises: ^ 

'»™P«"'*«tobteP«>Sran,code«wsto.ing,kx*controlwo«l,the 
lock control word Indteasng If the l«,lated memory area is enabled; and 
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computer readable program code for locking access to the configuration 
storage based on the lock control word. 

26. The computer program product of claim 25 wherein the computer 
readable program code for controlling access to the configuration storage 
further comprises: 

computer readable program code for prioritizing the access transaction 
based on the lock control word. 

27. The computer program product of claim 26 wherein the computer 
readable program code for controlling access to the configuration storage 
further comprises: 

computer readable program code for initializing the isolated memory 
area, the configuration storage, and the control storage upon reset 

28. The computer program product of daim 27 wherein the computer 
readable program code for generating the access grant signal comprises: 

computer readable program code for generating an address matching 
signal indicating if the physical address is within the isolated memory area; 
and 

computer readable program code for combining the address matching 
signal and the isolated access signal, the combined address matching signal 
and the isolated access signal corresponding to the access grant signal. 

29. The computer program product of claim 28 wherein the computer 
readable program code for generating the address matching signal comprises: 

computer readable program code for masking the physical address with 
the memory masking value; and 
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computer readable program code for comparing the masked physical 
address with the memory base value to generate a matching result 
corresponding to the address matching signal. 

30. The computer program product of claim 29 wherein the computer 
readable program code for generating the address matching signal farther 
comprises: 

computer readable program code for combining the matching result 
with at least one access condition, the combined matching result and the at 
least one access condition providing the address matching signal. 

31 . A system comprising: 

a processor having a normal execution mode and an isolated execution 

mode; 

a memory coupled to the processor having an Isolated memory area 
accessible to the processor in the Isolated execution mode; and 

a chipset coupled to the memory having an access controller, the 
access controller comprising: 

a configuration storage containing a configuration setting to 
configure an access transaction generated by the processor, the 
access transaction having access information, 

a configuration controller coupled to the configuration storage to 
control access to the configuration storage, and 

an access grant generator coupled to the configuration storage 
to generate an access grant signal using the configuration 
setting and the access infomiation. the access grant signal 
indicating if the access transaction is valid. 
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32. The system of claim 31 wherein the configuration setting 
Includes a memory mask value and a memory base value, the memory mask 
and base values defining the isolated memory area in the memory. 

33. The system of claim 32 wherein the configuration storage 
comprises: 

a memory mask register to store the memory mask value; and 
a memory base register to store the memory base valiie. 

34. The system of claim 33 wherein the access infonnation includes 
a physical address and an isolated access state, the isolated access state 
being provided by an isolated access signal, the isolated access signal being 
asserted when the processor generates a valid reference to the isolated 
memory area. 

35. The system of claim 34 wherein the configuration controller 
comprises: 

a control storage to store a lock control word, the lock control word 
indicating if the isolated memory area is enabled; and 

a locker to lock access to the configuration storage based on the lock 
control word. 

36. The system of claim 35 wherein the configuration controller 
further comprises: 

a prioritizer to prioritize the access transaction based on the lock control 

word. 

37. The system of daim 36 wherein the configuration controller 
further comprises: 
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«'«^«ttertoinffializethel8olatedmemoryarea.theconfi^^^^^^^ 
storage, and the control storage upon reset 

38. The system of claim 37 wherein the access grant generator 

compnses: 

«"««'e«'*tectortodetectifth9physlcaladdressbwiihlnlhe 

a^a, «,e add«s. detector gene^„g an address matehlng 

an access grart combiner coupw to «»add«ss detector to combine 
theadd,es.n»tehing Signal and the rsolated access s^nal, me combined 
address natehing signal and fte i«*«ed access .fenal conesponding to me 
access grant Signal. r » lo 

39. Hie system of claim 38 wherein the address detector comprises: 

a masking element to mask the physical address with the memory 
masking value; and 

a comparator to compare the masked physical address with the 
memon^ base value, the comparator generating a matching result 
corresponding to the address matching signal. 

40. TTie system of claim 39 wherein the address detector further 
comprises: 

an address detect combiner to combine the matching result with at least 
one access condition, the combined matching result and the at least one 
access condition provWing the address matching signal 
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